Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/68B37622ED0711EBA8904D13C4F9AE02.roa
File: 68B37622ED0711EBA8904D13C4F9AE02.roa (raw, json)
Hash identifier: huA8Z5cAW/Txr6r/bEBl8JkQL9Vuju18j/gN5EKxmqU=
Subject key identifier: 46:81:49:BA:A0:B3:F7:86:EF:C8:F6:F1:EA:91:1D:A7:0C:32:C4:1A
Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial: 0ADF
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/68B37622ED0711EBA8904D13C4F9AE02.roa
Signing time: Thu 06 Jul 2023 19:16:23 +0000
ROA not before: Thu 06 Jul 2023 19:16:23 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 3
IP address blocks: 103.116.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 01:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2783 (0xadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Validity
Not Before: Jul 6 19:16:23 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64a71307-a857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:d4:96:bf:4f:c8:db:ab:fc:a6:de:df:c5:
c6:b6:b9:c2:7b:51:2a:11:bd:58:e4:df:d5:ff:02:
4d:e6:d9:e1:bd:0a:fd:35:b1:37:f7:77:32:8f:d4:
51:7c:01:72:e1:54:42:0e:d5:11:24:08:2f:53:ff:
bf:ab:ad:21:b4:63:22:49:79:9d:57:31:0e:ca:c6:
5a:9d:13:a9:b9:61:bf:76:79:80:ab:41:4e:83:9b:
45:d3:36:3a:25:13:ce:04:08:ba:cb:98:7f:8d:92:
9a:73:08:1d:8b:04:df:5d:90:5b:d6:32:a4:dd:5a:
ff:30:7a:38:8e:ea:92:3a:2f:c6:89:d8:65:b4:14:
fd:bb:bc:c6:4e:f9:c4:f5:b4:95:f0:d5:61:ff:49:
b3:31:e5:17:c3:38:98:52:ac:79:10:e8:ad:b4:59:
d1:c9:19:7c:85:eb:5f:79:0d:7f:d2:3f:84:bf:df:
78:bb:de:6a:59:7d:57:ea:68:4e:2e:6b:a6:53:42:
98:fb:ee:17:7a:c3:b7:40:b6:3d:c9:ad:5e:ab:2e:
42:68:a5:cb:8a:b1:d1:82:76:27:f7:c3:e4:7a:ac:
47:ed:3b:1e:ef:32:ab:cb:64:fd:b8:43:33:13:c6:
8d:bc:67:98:df:86:38:c0:2d:f8:62:12:cc:00:78:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:49:BA:A0:B3:F7:86:EF:C8:F6:F1:EA:91:1D:A7:0C:32:C4:1A
X509v3 Authority Key Identifier:
keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/68B37622ED0711EBA8904D13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.90.0/24
Signature Algorithm: sha256WithRSAEncryption
32:be:5e:cb:c3:a9:f4:fe:24:10:eb:94:92:eb:9f:a1:d3:9d:
00:cd:83:63:2f:b9:6d:9c:86:bc:1c:d1:ef:c5:00:9b:e9:f0:
aa:5b:1a:f2:5b:6b:21:ae:a2:c2:a7:77:e9:8e:99:ef:43:e2:
3e:ec:f8:b1:80:c6:36:db:59:99:2d:d5:c4:d2:34:8d:61:f2:
f4:97:db:2a:91:fa:7f:9b:01:e4:51:8c:9d:a1:02:b0:e8:21:
19:92:ff:e2:b3:ce:0a:0b:94:c0:6e:c0:9b:20:52:a6:8b:5b:
3e:98:00:a3:c7:bf:d2:6c:ab:fd:d8:31:c0:c9:74:7e:cc:d6:
c4:00:18:3e:bf:42:3d:32:fc:29:71:84:9f:0a:e5:fb:61:ef:
77:74:88:8a:21:32:d2:69:7f:7a:b8:70:99:56:18:0b:4f:82:
f6:6b:11:d1:cb:33:ef:cf:89:6d:e9:cf:b9:0c:32:c6:41:df:
de:0b:15:46:ee:e9:f1:de:7a:44:96:cf:12:87:06:1c:cf:b4:
d0:da:b1:28:7e:a4:81:38:8b:a5:3a:e4:23:f8:a7:1d:05:28:
0c:dd:40:22:81:34:ca:15:00:55:8d:11:10:e8:6b:9a:eb:82:
97:f5:66:9f:42:d5:80:a0:3e:04:79:e5:74:d4:4b:f2:e9:76:
2e:9b:a4:58
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw
M0E1MDJDQ0MwHhcNMjMwNzA2MTkxNjIzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE3MTMwNy1hODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2pDUlr9PyNur/Kbe38XGtrnCe1EqEb1Y5N/V/wJN5tnhvQr9NbE393cyj9RR
fAFy4VRCDtURJAgvU/+/q60htGMiSXmdVzEOysZanROpuWG/dnmAq0FOg5tF0zY6
JRPOBAi6y5h/jZKacwgdiwTfXZBb1jKk3Vr/MHo4juqSOi/GidhltBT9u7zGTvnE
9bSV8NVh/0mzMeUXwziYUqx5EOittFnRyRl8hetfeQ1/0j+Ev994u95qWX1X6mhO
LmumU0KY++4XesO3QLY9ya1eqy5CaKXLirHRgnYn98PkeqxH7Tse7zKry2T9uEMz
E8aNvGeY34Y4wC34YhLMAHhFpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEaBSbqg
s/eG78j28eqRHacMMsQaMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD
RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OERCNEUvNzdFN0Y5QTAwQ0U1MTFFQUEyMERERDgyQzRGOUFFMDIvNjhCMzc2MjJF
RDA3MTFFQkE4OTA0RDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABndFowDQYJKoZIhvcNAQELBQADggEBADK+XsvDqfT+JBDr
lJLrn6HTnQDNg2MvuW2chrwc0e/FAJvp8KpbGvJbayGuosKnd+mOme9D4j7s+LGA
xjbbWZkt1cTSNI1h8vSX2yqR+n+bAeRRjJ2hArDoIRmS/+KzzgoLlMBuwJsgUqaL
Wz6YAKPHv9Jsq/3YMcDJdH7M1sQAGD6/Qj0y/ClxhJ8K5fth73d0iIohMtJpf3q4
cJlWGAtPgvZrEdHLM+/PiW3pz7kMMsZB394LFUbu6fHeekSWzxKHBhzPtNDasSh+
pIE4i6U65CP4px0FKAzdQCKBNMoVAFWNERDoa5rrgpf1Zp9C1YCgPgR55XTUS/Lp
di6bpFg=
-----END CERTIFICATE-----
Generated at Thu May 9 02:55:01 2024 by rpki-client on console-ams.rpki-client.org